block external access to private-only folders
shorten .htaccess file for users